CVE-2015-9413

CVE-2015-9413

EPSS 1.1%

The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://packetstormsecurity.com/files/133480/https://wordpress.org/plugins/eshop/#developers https://wpvulndb.com/vulnerabilities/8180